Memo on Rebuilding the Federal Government as a Protocol

FOR IMMEDIATE RELEASE — July 4, 2045 The American Network marks ten years since Ratification Day. Citizen trust in federal institutions, measured continuously on the open ledger, stands at 81 percent — the highest recorded for any national government in the modern era. Ten years ago today, the thirty-eighth state ratified the four Network Amendments, completing the first lawful transformation of a major nation-state into a network state. Since then, every satoshi of federal revenue has been traceable from the moment it was collected to the moment it was spent. The federal government has performed exactly four functions — joint defense, protection of property rights, joint economic power, and enforcement of the Bill of Rights — and nothing else, because the system makes it mechanically impossible for it to do anything else. The fifty states, operating as semi-autonomous nodes, have passed more meaningful legislation in a decade than the old Congress passed in fifty years, each law fitted to the people who actually live under it. No citizen has waited in line to vote since 2036. No federal dollar has been printed since 2034, because there are no federal dollars. There is no national debt clock, because there is no mechanism by which unbacked debt can exist. The headline is not what the government did. The headline is what it could no longer do.

That's the press release. Everything below is the work required to make it true. Good intentions never made a press release come true. Mechanisms do. This memo is a memo about mechanisms.

Part Two: It Is Day 2 in Washington, and Day 2 Is Death I have always said that Day 2 is stasis, followed by irrelevance, followed by excruciating, painful decline, followed by death. Companies reach Day 2 when they stop obsessing over customers and start obsessing over proxies — process as proxy, metrics as proxy, the org chart as proxy. Governments reach Day 2 the same way, except they cannot go bankrupt quietly. They take everyone down with them. Look at the proxies that now run the United States. The proxy for citizen wellbeing is GDP, a number that goes up when you print money and goes up again when you spend it badly. The proxy for representation is an election held every two years among candidates pre-filtered by donors, after which the citizen's signal disappears into a building where nobody can trace it. The proxy for sound money is a committee of twelve people who set the price of the most important commodity in civilization — the time value of money — by deliberation, behind closed doors, and have devalued the unit by more than 96 percent over a century. The proxy for law is seventy thousand pages of federal register that no living person has read. When the metric and the mission diverge, Day 2 organizations defend the metric. That is what we are watching: trust in federal institutions at historic lows, debt compounding past the point of arithmetic return, money created to paper over the gap, and an accelerating temptation — visible in the procurement patterns of the surveillance and AI contracts now being signed — to manage the decline by managing the citizens rather than serving them. The source essay behind this memo calls the network state "the last lifeboat," and frames the choice plainly: either the coming transformation is built by the public and for the public, or it will be built by a handful of well-capitalized founders as private kingdoms with the rest of humanity outside the walls. I agree with the diagnosis and I agree with the urgency. The answer to oligarchic network states is not to wish them away. The answer is to out-build them — to take the most successful political startup in history, the United States, and refound it as the inaugural Network State for the people, by the people, of the people. Legally. On purpose. With better mechanisms. One note on scope, stated once and built into the foundation: this network is for every American citizen. The fifty nodes will diverge enormously — on taxes, schools, healthcare, culture, land use, commerce — and that divergence is the point. But rights attach to persons, not to states, and citizenship is the one thing no node may redefine. Equal protection of every citizen in every state is federal function number four, enforced by the same machinery that enforces the other three. A state in this network may differentiate on policy. It may never differentiate on personhood. That is a one-way door we walked through in 1868 and we are not walking back. Part Three: The Principles (Stubborn on Vision, Flexible on Details) Work backwards from the citizen. Every institution in this design starts from a single question: what does a citizen actually need from a continental-scale government that her state, her county, and her own community cannot provide? The honest list is short. Defense against external violence. Property and contracts that hold across borders. The economic leverage of a 330-million-person bloc. And a guarantee that her rights travel with her into all fifty states. Four functions. Everything else is somebody else's job, done closer to her, by people she can reach. Good intentions don't work. Mechanisms do. The 1789 Constitution is the finest mechanism document of its era, and it failed in one specific, instructive way: its limits were enforced by the very people they limited. "Congress shall make no law" turned out to mean "Congress shall make no law unless Congress, the President, and judges appointed by both agree that it should." Parchment barriers, Madison called them, and he was right to worry. In 2026 we can do what 1789 could not: we can write the constraint into the settlement layer itself, so that an unconstitutional act doesn't get litigated after the damage — it simply fails to execute, the way a Bitcoin transaction with an invalid signature fails to confirm. Don't ask institutions to be good. Make the bad act unexecutable. One-way doors get supermajorities and sunsets. Two-way doors get speed. Most decisions are two-way doors: walk through, look around, walk back if you don't like it. Those belong at the state layer, decided fast, by simple majorities, close to the people affected, reversible by the next legislature. A few decisions are one-way doors: war, constitutional change, monetary architecture. Those get heavy process — supermajorities, multiple chambers, citizen referenda, time delays — on purpose. The fatal flaw of the old system is that it processes both kinds of doors through the same slow machinery, which makes the trivial sluggish and the irreversible too easy (no citizen has voted on a war in eighty years). Sort the doors. Then tune the speed. Frugality breeds invention; scarcity is a feature. The federal node runs on a hard-capped budget denominated in money it cannot print. Constraint is not a bug to be engineered around with debt. It is the forcing function that keeps the center lean, the same way it kept a certain online bookstore building desks out of doors. Think in decades. Officials serve long single terms and then leave forever, which means their incentive horizon is their legacy, not their re-election. Laws expire by default, which means every generation re-consents to the rules it lives under instead of inheriting its grandparents' emergency measures as permanent fixtures. Disagree and commit — and exit. A continental nation will never agree on most things, and the design stops pretending it will. States implement federal frameworks their own way, opt out of what lies beyond the four functions, and override the center when three-quarters of them concur. Citizens who disagree with their state's direction retain the oldest and most underrated check in federalism: they can move, and their rights move with them.

Part Four: The Architecture in One Page

Three layers, two substrates. (Diagram 1 shows the full structure.) At the top sits the Federal Node — small by design, doing the four functions and constitutionally incapable of more. It contains a Federal Assembly that writes frameworks, a single Executive who operates within them, and a Supreme Court that reviews against the constitution, all sitting atop an automated compliance layer that checks every federal act before it can settle. In the middle sit the fifty State Nodes, where almost all lawmaking actually happens. State houses write and implement law — including the local implementation of every federal framework — and run courts, police, education, healthcare, welfare, and whatever else their citizens choose, in whatever mix their citizens choose. Two adjacent states may feel like different countries. Good. That is fifty parallel experiments instead of one national bet. At the base sits the Citizen Foundation: local assemblies of a few hundred adults each, the only place in the system where identity is verified face to face; constituencies that aggregate assemblies for representation; and citizens themselves, each holding a sovereign digital identity. Beneath everything run two substrates. The Identity Ledger — a decentralized, Nostr-style key infrastructure — is how the system knows that every vote, signature, and attestation comes from exactly one real citizen, without knowing anything else about her. The Bitcoin settlement layer is how the system moves and accounts for value, with the network holding no power to create money and no ability to hide its spending. Power flows up as representation and votes. Frameworks and services flow down. Money flows along rails everyone can audit. The rest of this memo walks each piece. Part Five: The Identity Substrate — One Citizen, One Key, Zero Surveillance Nothing else in this design works without solving identity, so we solve it first, and we solve it the way the source essay demands: secure, decentralized, and owned by the citizen — not a national ID database, which would be the surveillance state with better fonts. Each citizen generates a cryptographic keypair on her own device, exactly as a Nostr user does today. The public key is her civic identity. The private key never leaves her custody. The state's role is not to issue the identity but to attest to it: the citizen appears in person at her local assembly — the 350-to-700-adult community that is the system's atomic unit — where neighbors and a state registrar verify, face to face, that she is a real, living, unique citizen of that state. That attestation is signed onto the public identity ledger. It contains no biographical dossier. It says one thing: this key belongs to one verified citizen of Ohio, in good standing, attested on this date. In-person attestation at human scale is the anti-Sybil mechanism. You cannot fake ten thousand citizens when each one must be vouched for, in the flesh, by a community small enough to know its members, and when every attesting registrar's own key and history are on the ledger. The web of trust is literal: it is your neighbors. From that foundation, voting becomes a zero-knowledge proof. When a citizen votes — on a state law, a federal referendum, a recall — her device proves three things to the ledger: that she holds a validly attested key, that the key belongs to the relevant jurisdiction, and that this key has not already voted in this poll. It proves these things without revealing which key voted which way. The ballot is secret, the tally is publicly verifiable by anyone with a laptop, and fraud requires breaking mathematics rather than stuffing boxes. Re-counting an election takes minutes and can be performed by every citizen simultaneously. Keys get lost and people get coerced, so the protocol includes social recovery: a citizen designates recovery contacts within her assembly who can jointly authorize key rotation, with a mandatory time delay and public notice on the ledger so that a stolen rotation can be challenged before it takes effect. Coerced voting is mitigated the old way — the ballot is secret even from the coercer — and the new way: a citizen can re-cast within the voting window, with only the final ballot counting. One welcome side effect: a civic identity layer creates a clean, voluntary separation between humans and bots across the entire digital commons. Any platform can let users attach a "verified human" proof — again zero-knowledge, revealing citizenship of nothing more specific than "human, attested" — and the economics of bot swarms collapse. Part Six: Money — The Bitcoin Standard: You Cannot Print Trust

We assume a world already settled onto a Bitcoin standard, with the asset's volatility long since dampened by the depth of global adoption. The question is not whether to use it. The question is what a federal government looks like when it can no longer create money — and the answer is: honest, small, and remarkably easy to audit. There is no central bank. The Federal Reserve's functions either disappear or migrate. Money issuance disappears — the supply is the supply, 21 million, and no committee on Earth can vote it higher. Interest rates disappear as a policy instrument; the price of money is set the way the price of everything else is set, by people lending and borrowing it. The lender of last resort disappears, which sounds frightening until you notice what it implies: banks that cannot be bailed out must hold real capital, and the fractional-reserve alchemy that requires a money printer behind it gives way to full-reserve custody and honestly labeled, equity-funded credit. Payment settlement migrates to the Bitcoin network itself and its layers. Bank supervision migrates to the states, which charter financial institutions under their own rules — fifty regulatory experiments instead of one. The federal treasury is a glass vault. All federal funds sit in multi-party computation (MPC) vaults — treasury wallets whose keys are split such that no individual, and no single branch, can move a satoshi alone. Routine appropriated spending executes automatically as programmatic payment streams once an appropriation is enacted (more on that in the fiscal section). Extraordinary movements — anything outside an enacted appropriation — require threshold signatures from the Executive, the Assembly's appropriation key, and a quorum of state-held keys. The vault addresses are public. Every inflow and every outflow is visible to every citizen in real time, forever. "Where did my taxes go" stops being a rhetorical question and becomes a lookup. Debt becomes physics, not promise. The federal node cannot run a structural deficit, because there is no mechanism by which it can spend coins it does not hold. Borrowing exists for exactly one purpose — declared war or existential defense emergency — and requires a two-thirds vote of both Assembly chambers plus a national citizen referendum, with a constitutionally mandated amortization schedule of no more than twenty years and repayment streams encoded into the bond itself. A government that must ask its citizens, by name and by key, before mortgaging their future will mortgage it rarely. That is the intended behavior. States keep monetary freedom at the edges. Bitcoin is the unit of account and legal tender of the network, but states may charter local currencies, credit systems, and experiments as they wish — provided redemption and disclosure are honest and nobody is compelled to accept them. Sound money at the center, permissionless experimentation at the edge. The deeper point is that sound money is the economic counterpart of verified identity. One makes lying about who expensive; the other makes lying about value impossible. Cantillon privilege — the quiet tax by which those nearest the money printer harvest everyone else's savings — ends not because we passed a law against it but because the printer no longer exists. The most regressive tax in America is repealed by architecture. Part Seven: Revenue — One Tax, Progressive, Automated, and Visible The entire federal and state revenue apparatus is replaced by a single instrument: a progressive consumption tax. No income tax (the Sixteenth Amendment is repealed in the transition), no payroll tax, no corporate income tax, no estate tax, no tariff games. One tax, on one thing — what you take out of the common pool for yourself — at rates that rise with how much you take. Here is why consumption, and why now. Taxing income punishes the two behaviors a civilization should want more of: work and saving. Taxing consumption taxes what people extract rather than what they contribute, which is both economically saner and morally cleaner. The historical objection was always practical — consumption taxes collected at the register are flat, and making them progressive required exactly the kind of intrusive income-tracking bureaucracy we are trying to abolish. Digital money dissolves the objection. On transparent rails, progressivity becomes a math problem instead of an audit war. The mechanism. A citizen's annual consumption is, by definition, her verified inflows minus her net additions to savings and investment. On the Bitcoin standard both sides of that subtraction are cryptographically attestable. Each year — in practice, continuously — the citizen's own wallet software computes her consumption and generates a zero-knowledge proof that the correct tax was computed and paid under the published bracket schedule, without revealing a single underlying transaction to anyone. The state sees a valid proof and a payment. It does not see what you bought, where you ate, what you read, or whom you paid. Privacy for the citizen; transparency for the state — the exact inversion of the current arrangement, and the correct one. The progressivity. Two mechanisms stack. First, every verified citizen receives an automatic monthly prebate to her identity key, sized to fully cover the tax on essential-level consumption — which makes the effective rate on a modest household zero or negative before any bracket math begins. Second, marginal rates rise with annual consumption: an illustrative schedule exempts the first tranche of living-level consumption entirely, then steps through moderate rates on middle tranches up to a high top rate on extraordinary luxury consumption. The numbers are for the Assembly and the ratifying states to set and reset; the shape — exempt the floor, escalate toward the penthouse — is constitutional. A schoolteacher pays approximately nothing. A citizen consuming fifty million satoshis a year on yachts pays a great deal, and pays it automatically, and cannot hide it in a carried-interest clause, because there is no income tax for clever structuring to dodge. You are taxed when you spend it on yourself. Capital that stays invested — building companies, funding ideas, compounding for the long term — is not taxed at all, which is precisely the incentive a builder society wants. Compliance without an IRS. Random, ZK-based audits verify proofs without exposing transaction graphs; merchants on the network settle the point-of-sale component automatically during the transition period; evasion via off-network barter exists at the margins, as it always has, and stays marginal because using the network is cheaper than avoiding it. The enforcement apparatus shrinks from an agency of eighty thousand to a protocol and a small forensic office. Part Eight: The Budget — Capped at the Center, Directed by the States Revenue raised is not the same question as revenue controlled, and this design separates them deliberately. The federal core is hard-capped. The constitution fixes the federal node's operating budget as a capped share of total network consumption — a single-digit percentage, sized to the four functions and nothing else, with joint defense as the dominant line. The cap is enforced where everything else is enforced: in the settlement layer. Appropriations that would exceed the cap cannot be signed into the vault's spending logic. There is no continuing-resolution theater, because there is nothing to continue; the four functions are funded by standing constitutional appropriation, adjusted within the cap by the Assembly. Everything above the cap flows home. Every satoshi of revenue beyond the federal cap streams back automatically — programmatically, without annual renegotiation — to the state where it originated. And here is where direction of funds becomes real: each state decides what its returned revenue does. One state pours it into universities, another into rail, another into rainy-day reserves, another rebates it straight back to citizens. State houses set the allocation; citizens within each state can steer designated portions through conviction voting — a mechanism where a citizen stakes her voting weight on budget priorities over time, so that sustained, patient preferences outweigh momentary noise. The federal node has no leverage over this money and therefore no ability to do what the old system did constantly: dangle states' own tax dollars back to them as a bribe for policy compliance. Highway-funding blackmail dies in the settlement layer too. Every citizen gets a receipt. Because collection, custody, and disbursement all happen on public rails, each citizen's wallet can render — automatically, in real time — exactly where her contribution went: this much to the joint defense vault, this much returned to her state, this much of the state share into the school fund she conviction-voted for. Budget transparency stops being a 400-page PDF released in arrears and becomes a property of the money itself. Classified defense expenditures, the one legitimate exception, are committed to the ledger as hashes — provably included in the capped total, provably not exceeding it — and audited in the clear by a rotating, cleared panel of citizen auditors plus the Algorithmic Audit Court, with full declassification on a fixed clock. Part Nine: The Federal Branches — Small, Slow Where It Matters, and Watched The Federal Assembly (legislative). Bicameral, and — this is the crucial departure — seated by the states, not by national elections. The Chamber of the States holds two delegates per state; the Chamber of the People holds 150 seats apportioned by population. Both chambers' members are selected and recallable by their state houses, the way senators were before 1913. This is deliberate. National elections for federal office are how the center built an independent power base, a donor class, and a permanent campaign; routing federal representation through the state houses keeps federal legislators on a short leash held by the layer they're supposed to serve. The citizen's democratic energy is spent where it has the most leverage — electing her state house, voting directly on state matters, and wielding the national referendum veto described below. The Assembly writes Framework Acts only, and only within the four functions. It cannot implement, staff, or administer anything; it owns no agencies. Passage requires two-thirds of both chambers. And every act it passes carries an automatic ten-year sunset: unrenewed law expires, removed from the code by the compliance layer on schedule. The default state of a federal law is dead. Keeping one alive requires a fresh supermajority every decade, which means every law must keep earning its existence in front of a new generation. Day 2 legislation — the emergency measure from 1942 still governing your life — becomes structurally impossible. The Executive. One person. A single ten-year term, no re-election, ever. Clear, lonely, undiluted accountability — a council diffuses blame; a single executive on a long clock with no campaign to run has exactly one incentive left, which is how the decade goes down in history. The Executive commands the joint defense forces within Assembly frameworks, conducts foreign affairs and trade negotiations for the bloc, and operates the treasury machinery. The Executive writes no law, owns no domestic agencies, and issues no order that the compliance layer hasn't validated against the constitution and an enacted framework — an ultra vires executive order is not "controversial"; it is unexecutable, rejected at the vault like a bad signature. Removal for cause requires two-thirds of the state houses — note, the states, not the Assembly, so that impeachment cannot become a weapon in intra-federal turf wars. The Supreme Court. Nine justices, eighteen-year staggered terms, one seat turning over every two years — so every Executive shapes the bench equally and confirmation wars lose their apocalyptic stakes. The Court reviews; it does not create. Its constitutional rulings bind the federal node and the frameworks, and its most controversial decisions face a final, human check: three-quarters of the state houses, acting within a fixed window, may override a ruling's prospective application. Beneath it sit the specialized federal benches: the Commerce and Property Courts for interstate disputes, and the Algorithmic Audit Court — the bench with mandatory technical masters — which reviews every automated decision system used by any layer of government, annually, in public, with the power to halt any algorithm whose behavior cannot be explained to it. Part Ten: How a Law Is Passed — Law as API